Dear All,
NIST published Draft NIST 7621 R2, Small Business Cybersecurity: Non-Employer Firms on May 1, 2025. This report is designed to help small firms (those with no employees, or “non-employer” firms) use the NIST Cybersecurity Framework (CSF) 2.0 to begin managing their cybersecurity risks. The goal of the publication is to introduce fundamentals of a cybersecurity program, in non-technical language, at the earliest stage of a business to set a solid cybersecurity risk management foundation. The comment period is open through June 30, 2025.
https://nvlpubs.nist.gov/nistpubs/ir/2025/NIST.IR.7621r2.ipd.pdf
Kyaw Myo Oo
Information Security Program Manager , CB BANK PCL
CCIE #58769 | CISSP | PMP | CCSM | SAA-C03 | PCNSE
https://www.linkedin.com/in/kyaw-myo-oo/
